Web3 Impact Toolkit

Why Web3 is a phishing paradise

Transactions are irreversible. There is no "fraud department" to call. Attackers know this and have built mature, productized scam infrastructure: drainer kits, fake support networks, lookalike domains, malicious ads, deepfaked founder voices on calls.

Wallet drainers

A drainer is a malicious smart contract / dApp pattern designed to extract maximum value from a victim wallet in a single (or very few) signatures. They appear as:

•Phishing clones of popular protocols (typo domains, Google ads).

•"Free mint" / "claim" links from compromised social media accounts.

•NFT "verification" sites linked from Discord and Telegram DMs.

•Browser extensions claiming to "boost" Web3 productivity.

Fake support DMs

You post in a real project's Discord asking for help. Within minutes, a "moderator" DMs you with a friendly tone and a link to "validate" your wallet. It is always a scam. No real support team initiates DMs; no real team needs your seed phrase.

"Airdrops" and "claims"

•Unsolicited tokens appearing in your wallet are often bait. Ignore them.

•For legitimate airdrops from known projects, claim from the project's real bookmarked URL, on a low-value wallet, after reading the transaction.

Donor and grant scams targeting NGOs

NGOs have become a specific target: attackers create plausible "donor" personas offering large crypto grants, sometimes referencing real foundations. The pattern almost always involves:

•Pressure and urgency ("we must move funds this week").

•A request to pay a small "fee", "tax" or "gas" up front.

•A request to connect your treasury wallet to a custom website "to verify".

A real donor never asks you to pay first or connect your treasury to an unfamiliar dApp. When in doubt, verify out-of-band with the funder using a phone number / address from their official website.

Operational hygiene against scams

•Bookmark every protocol and finance site you actually use. Use only the bookmarks.

•For social media, lock down DMs from non-followers on sensitive accounts.